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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . This communication is responsive to amendment filed 09/03/2008 . 

2. ^ The allowed claim(s) is/are 1 - 23 . 

3. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) □ All b)DSome* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1. 84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 
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EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

2. Authorization for this examiner's amendment was given in a telephone interview 
with Elizabeth Philip Dahm on November 05 and November 19, 2008. 

3. The application has been amended as follows: 
In the claim: 

Please amend claims 1 , 10, 14, 17, 18, and 23 as follows: 

1. A method implemented by a computer, the method comprising: 

analyzing a plurality of database access statements stored in a computer 
memory that were issued for an application during the application's use to determine 
previous accessed items and types of access for the application; and 

developing a role for the application based on the previous accessed 
items and types of access for the application, wherein when the application is in use by 
a user, the developed role for the application allows the user database access. 

1 0. An article of manufacture comprising: 
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a machine-readable storage medium storing instructions op e rab le configured to 
cause one or more machines to perform operations comprising: 

analyzing a plurality of database access statements that were issued for an 
application during the application's use to determine previous accessed items and types 
of access for the application; and 

developing a role for the application based on the previous accessed items and 
types of access for the application, wherein when the application is in use by a user, the 
developed role for the application allows the user database access. 

14. The article of claim 1 0 wherein the instructions are further oporob l o 
configured to cause one or more machines to perform operations comprising 
determining which of a set of users are authorized to use the application. 

1 5. The article of claim 1 0 wherein the instructions are further oporab l o 
configured to cause one or more machines to perform operations comprising: 

determining whether a user request to establish an application session has been 
detected; finding the role for the application; and 
assigning the role to a user 



1 7. The article of claim 1 5 wherein the instructions are further oporab l o 
configured to cause one or more machines to perform operations comprising: 
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detecting an end of the application session; and if an end of the application 
session is detected, disabling the assigned role for the user 

18. A database security analyzer comprising: 

a communication interface op e rab le configured to receive a plurality of database 
access statements that were issued for an application during the application's use; 

a memory op e rab le configured to store the issued database access statements; 

and 

a processor op e rab le configured to develop a role for the application based on 
the previously issued database access statements for the application, wherein when the 
application is in use by a user, the developed role for the application allows a user 
database access. 

23. A method implemented bv a computer comprising: 

capturing a plurality of database access statements that were issued for one or 
more applications during the application's use, wherein the database access statements 
comprise Structured Query Language (SQL) queries; 

normalizing the captured database access statements; 

eliminating redundancies in the normalized database access statements; 

analyzing the normalized database access statements stored in a computer 
memory to determine previous accessed items and types of access for an application, 
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wherein the previous accessed items and types of access include objects accessed and 
operations performed on the objects; 

determining permissions for the application based on the previous accessed 
items and types of access for the application; 

developing a role for the application based on the determined permissions; 

determining which of a set of users are authorized to use the application; 

detecting a user request to establish a session of the application; 

determining if the user is authorized to use the application; 

if the user is authorized to use the application, finding the role for the application; 

assigning the role to the user; 

detecting an end of the application session; and 

if an end of the application session is detected, disabling the assigned role for the 

user. 

REASONS FOR ALLOWANCE 

4. Claims 1 - 23 are allowable in light of the applicant's arguments and in light of 
the prior art made of record. 

Reason for Indicating Allowable Subject Matter 

5. The following is an examiner's statement of reasons for allowance: Upon 
searching a variety of databases, the examiner respectfully submits that "determine 
previous accessed items and types of access for the application; and developing a role 
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for the application based on the previous accessed items and types of access for the 
application, wherein when the application is in use by a user, the developed role for the 
application allows the user database access" as recited in claims 1 , and 10; "a 
processor configured to develop a role for the application based on the previously 
issued database access statements for the application, wherein when the application is 
in use by a user, the develop role for the application allows a user database access" as 
recited in claim 18; and "determine previous accessed items and types of access for an 
application, wherein the previous accessed items and types of access include objects 
accessed and operations performed on the objects; determining permissions for the 
application based on the previous accessed items and types of access for the 
application; developing a role for the application based on the determined permissions; 
determining which of a set of users are authorized to use the application" as recited in 
claim 23 in conjunction with all other limitations of the dependent and independent 
claims are not taught or suggested, or obvious over the prior art of record. Therefore, 
claims 1 - 23 are hereby allowed. 

6. Any comments considered necessary by applicant must be submitted no later 
than the payment of the issues fee. Such submissions should be clearly labeled 
"Comments on Statement of Reasons for Allowance." 
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Points of Contact 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to GIOVANNA COLAN whose telephone number is 
(571)272-2752. The examiner can normally be reached on 8:30 am - 5:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, John Breene can be reached on (571) 272-4107. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Giovanna Colan 
Examiner 
Art Unit 2162 
November 19, 2008 

/John Breene/ 

Supervisory Patent Examiner, Art Unit 2162 



